Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer
File:                     SKYQvx6BAahCT58kGCuWfnoDoe4.cer (raw, json)
Hash identifier:          U8Q8BueiU6ejm5IMArv8ivhwBHglmKhq5syKMipRa2k=
Subject key identifier:   48:A6:10:BF:1E:81:01:A8:42:4F:9F:24:18:2B:96:7E:7A:03:A1:EE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7699
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 02:57:16 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 144.79.116.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30361 (0x7699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 27 02:57:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91F9BB3, serialNumber=48A610BF1E8101A8424F9F24182B967E7A03A1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:f3:4d:9e:bf:99:1f:8d:cd:d6:c7:a2:23:
                    90:37:14:63:bf:bb:5e:82:8a:6b:7d:1a:09:a0:77:
                    67:43:ca:f2:23:d1:98:2d:e1:51:52:77:33:bf:36:
                    36:fc:aa:89:71:11:fc:e9:30:6a:35:9c:13:7b:51:
                    95:a4:67:a7:85:5e:dc:a3:f6:3e:61:f5:f8:64:b2:
                    75:60:0e:b4:90:db:7a:56:81:e9:da:09:6a:b7:89:
                    95:c3:0c:3d:e2:ce:d1:27:2b:d5:b4:87:0e:8a:89:
                    3c:46:05:49:3b:7d:ff:17:f9:7c:64:c7:be:23:59:
                    8e:12:f3:a0:03:cc:69:00:8c:ab:00:ae:99:d6:9a:
                    7a:a5:51:f1:b6:84:e5:6f:49:e7:2c:6e:c2:78:89:
                    68:2d:9e:be:5a:37:62:3d:ab:29:cd:df:75:cc:55:
                    0f:1e:8d:06:40:1c:c5:bd:2c:52:6b:72:9c:e4:1b:
                    0d:1b:78:6e:fb:92:e1:cb:92:b6:c2:53:f6:25:f3:
                    31:d5:3d:5f:de:95:34:e6:31:f4:c2:05:2c:ea:3f:
                    cc:08:07:ff:36:5d:9e:2f:58:2f:f8:0c:8a:25:a5:
                    ec:e3:0a:98:f4:b3:3c:07:1a:63:c8:1a:1c:1d:db:
                    aa:fa:ac:d7:50:0d:30:45:f1:5f:7b:68:a0:1b:66:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A6:10:BF:1E:81:01:A8:42:4F:9F:24:18:2B:96:7E:7A:03:A1:EE
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:c0:55:a4:26:e1:66:ca:35:75:4e:4f:b9:3c:14:8b:5b:01:
         9e:19:56:65:46:45:85:00:a2:a9:e9:b4:1b:ac:d5:e7:8c:b1:
         5a:f8:35:4e:68:c3:4f:bc:f9:3f:00:8d:46:41:cb:dc:6c:4e:
         21:64:ff:c4:42:aa:1d:d0:b7:ef:ea:17:d0:db:5d:b2:db:d9:
         b6:5a:19:87:6b:fc:ff:0b:76:e4:83:83:c3:29:68:eb:20:2b:
         c8:68:02:0d:99:c8:ce:72:6c:45:d2:29:0b:18:a0:d0:a5:c1:
         47:3f:f4:58:ea:b8:3e:65:3c:dc:d8:db:d8:ff:e2:67:5e:7a:
         98:21:b2:02:66:64:22:88:40:4c:9b:ba:c3:a3:1c:e9:68:a6:
         bd:bf:55:8b:d6:13:a2:b7:d2:e6:91:f8:6b:2d:4c:7b:92:32:
         3f:3f:60:44:54:e4:fd:59:9d:94:4a:e0:73:7a:94:55:6f:d8:
         4f:d3:94:48:2f:31:86:80:eb:c0:9b:38:c1:a7:e3:ad:b0:fd:
         c9:88:53:eb:b7:98:7c:7b:10:9a:a7:75:89:63:2f:d3:b0:dd:
         2d:7b:ad:ce:9a:38:32:23:ac:4f:af:16:7e:f3:bd:85:0a:70:
         53:5b:5d:aa:b5:23:7b:64:e9:95:a4:31:b4:91:a2:d2:fb:b9:
         cd:5d:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:21 2026 by rpki-client